Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: fwHYxado5GkAGLvlyMRkP02vn6y/iNJkPd9s6Z54iKA=
Subject key identifier: EB:17:5B:08:46:8B:24:AB:80:2F:5C:38:B1:11:B9:2D:D7:1F:5A:65
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 019A71B854B255D7DA526B3846E1D5824EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: efcZki4Z83CuGfeaJwJ3BanmtvFwCtcPSazDejZV8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:54:b2:55:d7:da:52:6b:38:46:e1:d5:82:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=eb175b08468b24ab802f5c38b111b92dd71f5a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:15:0c:68:fb:0d:b2:70:3a:8a:1b:64:fc:
08:cf:0b:31:c0:1f:3d:a2:b6:80:02:bb:0e:c0:32:
85:bd:d7:fd:d0:a9:c2:77:ae:fa:3a:65:5e:b4:e5:
fa:bc:a7:1e:8f:45:0a:7b:86:a1:63:10:d5:94:87:
31:a1:fc:03:a2:4a:17:f7:14:42:0e:24:e9:59:fa:
d1:e1:5f:38:82:49:a7:4d:79:38:c9:16:f7:1a:b0:
f6:60:48:6d:01:4c:d3:b2:74:72:6d:f8:66:00:b8:
20:71:19:8e:62:e9:6e:7a:cc:7e:b2:eb:53:d9:9f:
30:c1:9d:de:0e:70:fb:9e:d6:74:37:c9:09:44:4f:
f4:14:0a:ba:da:38:4c:7d:62:1d:30:7c:ce:fb:ce:
66:38:7c:04:7a:f4:24:b3:bb:33:54:fa:6c:5f:a9:
b3:ea:9f:7b:ee:eb:ac:ca:e7:5d:aa:a9:eb:59:0c:
7c:4e:ae:4f:c7:d4:74:2f:a6:d5:93:e8:05:79:42:
69:de:05:5e:a5:28:d6:5a:3f:c0:a6:14:b2:40:8b:
f8:e0:48:c0:8d:4a:3a:5b:28:18:b9:e1:9a:5d:4e:
67:0a:51:96:f4:bd:d6:28:13:b2:15:e0:f8:75:d5:
2e:e2:29:ac:44:b5:dc:27:66:9f:41:8b:0c:d2:5c:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:5B:08:46:8B:24:AB:80:2F:5C:38:B1:11:B9:2D:D7:1F:5A:65
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c7:70:96:40:b7:a1:a9:cd:36:2a:24:09:b9:d1:fa:c9:86:
77:f7:85:d7:2a:bd:bd:18:3a:45:88:00:c0:72:9e:ae:4c:ba:
8b:0b:15:1c:c3:06:4f:ad:24:dc:79:64:4d:8f:d0:dc:b0:7b:
f5:2f:60:65:68:90:df:a2:2d:17:37:57:f2:63:4f:0e:eb:fd:
88:f2:ea:62:45:dc:d8:10:b0:f2:a6:57:51:bf:c0:c7:9c:10:
cc:8d:dc:c1:ab:2f:53:15:c1:aa:e9:99:4e:79:75:65:05:84:
e3:81:f9:f9:23:86:13:b8:47:2d:37:68:ae:b4:4c:8a:41:2c:
0d:90:be:75:23:d1:1c:86:da:68:04:fc:82:50:f4:0a:5d:64:
88:29:48:eb:8f:74:4b:85:08:f2:df:a7:6a:57:7b:c8:3e:68:
ec:0c:ad:4c:0c:fb:c5:2a:7b:60:5d:97:8d:75:23:5f:d8:ba:
d3:09:c5:36:d7:d8:59:5b:c1:2b:30:dc:a8:68:b8:bc:cb:c3:
32:26:83:49:9a:80:ca:6e:b7:45:65:8c:40:9e:2a:12:ae:4d:
3f:0c:23:0d:3d:d4:84:94:41:de:86:15:3e:1e:07:cb:42:ba:
3e:9f:cb:34:95:76:99:1f:a7:86:db:be:8d:62:c7:12:a1:7f:
cd:f8:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:59 2025 by rpki-client